Releasing a transport authority checks

Hi,
I'll be glad if you could help me with the following:
I guess project managers/basis/developers typically log onto development environment and use SE09 to release transports. However, a user could log onto production or QA and execute SE09 to do the same. Where are the authorizations to release checked? In the source system (development) or whereever the user has logged on?
I know that if a user tries to import a change (through STMS) then the authorizations from the target system are checked independently of where the user has logged on and this made me wonder what happens with releases.
Thanks in advance,
Jose

Hi Jose,
As you right said, if you are transporting a request the authorization for the same will be checked in the target system even though you are transporting a request in quality system from development, as it will login to quality from development.
But, incase of releasing a request you will be releasing the request in the source system in which it is created only. Thus for release it will check in source system only. i.e., if you are creating a request in development system then you can release that request in development system only, but not from quality or production.
Similarly, if a request is created in quality and production then it can be released from quality or production only. Hence it is mandatory to restrict the client settings in quality and production system against modification and transport request creation.
Even after restricting the client settings, if you feel that you want to restrict the release authorization in quality and production system you can do that from S_TRANSPRT (Currently, I do not have access to system....not sure about correctness of TRANSPRT. Please check for similar object for transport related)
Hope clarified.
Thanks & Regards,
Sharath Babu M

Similar Messages

Error while Releasing a transport request - DSO 0SD_O03: Active version

Hi all,
I am getting below error when I am trying to release a transport request.
Object ODSO 0SD_O03: Active version differs from modified version.
I activated DSO again,but I was not successful to correct the error.Please help me correcting this error.
Regards,
Bob

check
match and copy while installing the business content
Match (X) or Copy
If the SAP delivery version and the active version can be matched, a checkbox is displayed in this column.With the most important object types, the active version and the SAP delivery version can be matched.
When a match is performed, particular properties of the object are compared in the A version and the D version. First it has to be decided whether these properties can be matched automatically or whether this has to be done manually.
A match can be performed automatically for properties if you can be sure that the object is to be used in the same way as before it was transferred from Business Content.
When performing matches manually you have to decide whether the characteristics of a property from the active version are to be retained, or whether the characteristics are to be transferred from the delivery version.
The Match indicator is set as default in order to prevent the customer version being unintentionally overwritten. If the Content of the SAP delivery version is to be matched to the active version, you have to set the Installindicator separately.
The active version is overwritten with the delivery version if
 the match indicator is not set and
 the install indicator is set.
check following thread
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/102906a4-f13d-2e10-7199-ce316ff254b8?QuickLink=index&overridelayout=true
Thanks and regards
Kiran

We couldn't release any transport request!

Hi experts,
We could't release any transport request on DEV from today.
We could do it until yesterday.
We have never changed any settings.
Except release, we can use SAP system, and
we can import released transport request to QAS .
Also I could tp addtobuffer on DEV.
[Operation]
SE10 -> select transport request -> click [release] button
and, we can see the error message as below.
Error Message *****************************************************
Test call of transport control program (tp) ended with return code
[Transport Log]
We can see the log as below.
ERROR: No connect due to DbSl Load Lib Failure
ERROR: environment variable dbms_type is not set.
ERROR: Connect to RDV failed (20090220140504).
ERROR: Connect to RDV failed (20090220140740), failed to read table SVERS.
[Our Action]
1. Change Environment variable & Restart SAP (note 351586)
2. replace tp & saptrans
3. change parameter (note 175627)
4. add full control to everyone on sap/trans
5. see note 534765，98678，128126，592514，799058，879941，508140，610640
Thank you in advance.
BR,
Toshi

Hi,
Thank you for your reply.
I did r3trans -d, and the result is as belllow.
F:\usr\sap\RDV\SYS\exe\run>r3trans -d
This is r3trans version 6.13 (release 640 - 07.01.08 - 14:25:00).
unicode enabled version
2EETW000 sap_dext called with msgnr "2":
2EETW000 -
db call info -
2EETW000 function:   db_ntab
2EETW000 fcode:      NT_RDTDESCR
2EETW000 tabname:    TADIR
2EETW000 len (char): 5
2EETW000 key:        TADIR
2EETW000 retcode:    2
r3trans finished (0012).
Also I checked TP_DOMAIN.pfl, but it seems that there is no problem.
But I found doubtful point.
It is environmental variable, and now it is differnt from last friday.
Example, last friday , there was variable as bellow,
but today I couldn't find them
In the meantime , I will deal with them.
dbms_type=MSS
MSSQL_DBNAME=RDV
MSSQL_SCHEMA=rdv
MSSQL_SERVER=<hostname>\RDV
Toshi

Error when releasing a transport

Hello experts,
I am getting an error when releasing a transport. The error message is telling me that
Object DTPA DTP_009C8T81IIB6H4UFC7FQUVRFL was set to 'inactive'
The detailed error message isnt very helpful. The performance assistant gives the error message RSO 407.
I found another thread, scn.sap.com/thread/3428031
The answer in this thread appears to be very close to a solution for me, I just need a little more information I think. As it says, I have looked in the table RSTRAN for the transformation that this DTP processes. There are three rows, with a different OBJVERS. A and M are both set to ACT, but OBJVERS = D is set to OBJSTAT = INA.
I suspect that this is the problem with the releasing of my transport. Do you agree?
If so, how do I go about getting this activated?
Many thanks.

Hi Simon,
The D version will be always inactive as it indicate SAP Delivered version of the transformation.
I will suggest just have a look at any existing transformation, you will find same status i.e D version INA also check last change it will be SAP also under content column you will find info for D version.
I still say, just go ahead and release your transport by ignoring the message, it should work. You are all set to move your transport.
Rest upto you.
I have tried releasing transport by ignoring messages many times.....and worked all time
Thank-You.
Regards,
VB

Releasing a Transport Request ends with error code 0012.

Hi,
We have a Development system and a Production System (both running on separate windows machine) but they are not connected in STMS. We perform transporting of Requests at o.s level and NOT through STMS.
We are facing this new problem - We are trying to release a Transport Request in SE01 and it ends with error code 0012. The task inside the Request is released without any error. There is no Notes in SAP Marketplace for this.
Test call of transport control program (tp) ended with return code 0012
Message no. TK094
Diagnosis
Your transport request could not be exported, since all requirements were not fulfilled.
Calling the transport control program tp
"tp EXPCHK EFIK900025 pf=E:\usr\sap\trans\bin\TP_DOMAIN_EFI.PFL -Dtransdir=E:\usr\sa"
which checks the export requirements, returned the following information:
Return code from tp: 0012
Error text from tp: ERROR: Buffer check failed.
System Response
Further processing is terminated.
Procedure
Check the following points:
Feasibility of the transport control program tp
Parameter settings in the transport profile
Availability of the transport directory and the subdirectories (cofiles, data, log, sapnames, bin)
Write authorization for the subdirectories
Write authorization for the files of the subdirectories cofiles, data, log, sapnames
Release the request again when the error has been removed
Please help.
Regards,
Mohan.

Hi Mohan,
Nice to hear that that your problem is resolved.
For Pamater CTC, please check the below links:
Automatic transport between DEV clients ?
http://sapsolutions.searchsap.com/kw;ExtendedTransportControl/content-sap.htm
Regards,
Hari Kishan

Error 12 when releasing a transport

I am trying to release a transport, but get an error 12 "The request's target VBQ.500 is client dependant but the target system cannot handle that". VBQ.500 is a virtual system. Anyone have any suggestions for me to check out? I'm at a loss.
Thanks,
-- Jackie

Hello Jackie
I cannot tell you the reason for the error code. Somehow the CTS "believes" that the target system cannot handle clients and client-dependent objects.
For the moment I think your main problem is to release your customizing request (or is it a workbench request containing client-dependent repository objects?). Try to change the target of your request. Perhaps the CTS can handle that. It might be necessary to adjust transport routes (transaction STMS) in order to get a "decent" target.
Is your virtual system VBQ.500 a <b>consolidation system</b>? If not then try to change this (Note: this is a critical SAP basis activity).
As soon as the request is released you can try to import it into your VBQ.500 system.
Regards
Uwe

Web Service Homepage: Authority check failed

Dear Colleagues,
I have created a Web Service and now I want to test it via its Web Service Homepage (TA WSADMIN). The Homepage is displayed correctly, but testing leads to an error:
Authority check failed
Are there any prerequisites I maybe do not accomplish?
(I tested a very similar web service in another system, and there it works)
Here are some more information about my service:
- Service was build with Web Service Wizzard out of a function module
- Here you can see the conversation resulting of the test:
POST /sap/bc/srt/rfc/sap/Z_TEST_Q73_CONFIG_WS?sap-client=003 HTTP/1.1
Host: bsl8011.wdf.sap.corp:50073
Content-Type: text/xml; charset=UTF-8
Connection: close
Cookie: <value is hidden>
Cookie: <value is hidden>
Authorization: <value is hidden>
Content-Length: 381
SOAPAction: ""
<?xml version="1.0" encoding="UTF-8" ?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<SOAP-ENV:Body>
<ns1:Z_TEST_WS_CONFIG xmlns:ns1='urn:sap-com:document:sap:rfc:functions'>
<INPUT>TEST</INPUT>
</ns1:Z_TEST_WS_CONFIG>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
HTTP/1.1 500 Internal Server Error
content-type: text/xml; charset=utf-8
content-length: 363
sap-srt_id: 20060404/125124/v1.00_final_6.40/1B0831447838C429E10000000A424016
server: SAP Web Application Server (1.0;700)
<soap-env:Envelope xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/">
<soap-env:Body>
<soap-env:Fault>
<faultcode xmlns:n0="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">n0:FailedAuthentication</faultcode>
<faultstring xml:lang="e">Authority check failed</faultstring>
</soap-env:Fault>
</soap-env:Body>
</soap-env:Envelope>
The WSDL-Document looks as follows:
<?xml version="1.0" encoding="utf-8"?><wsdl:definitions targetNamespace="urn:sap-com:document:sap:rfc:functions" xmlns:http="http://schemas.xmlsoap.org/wsdl/http/" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:tns="urn:sap-com:document:sap:rfc:functions" xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><wsdl:types><xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:tns="urn:sap-com:document:sap:rfc:functions" targetNamespace="urn:sap-com:document:sap:rfc:functions" elementFormDefault="unqualified" attributeFormDefault="qualified"><xsd:simpleType name="char60"><xsd:restriction base="xsd:string"><xsd:maxLength value="60"/></xsd:restriction></xsd:simpleType><xsd:element name="Z_TEST_WS_CONFIG"><xsd:complexType><xsd:sequence><xsd:element name="INPUT" minOccurs="0" type="tns:char60"/></xsd:sequence></xsd:complexType></xsd:element><xsd:element name="Z_TEST_WS_CONFIGResponse"><xsd:complexType><xsd:sequence><xsd:element name="OUTPUT" type="tns:char60"/></xsd:sequence></xsd:complexType></xsd:element></xsd:schema></wsdl:types><wsdl:message name="Z_TEST_WS_CONFIG"><wsdl:part name="parameters" element="tns:Z_TEST_WS_CONFIG"/></wsdl:message><wsdl:message name="Z_TEST_WS_CONFIGResponse"><wsdl:part name="parameters" element="tns:Z_TEST_WS_CONFIGResponse"/></wsdl:message><wsdl:portType name="Z_TEST_Q73_CONFIG_WS"><wsdl:operation name="Z_TEST_WS_CONFIG"><wsdl:input message="tns:Z_TEST_WS_CONFIG"/><wsdl:output message="tns:Z_TEST_WS_CONFIGResponse"/></wsdl:operation></wsdl:portType><wsdl:binding name="Z_TEST_Q73_CONFIG_WSSoapBinding" type="tns:Z_TEST_Q73_CONFIG_WS"><soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/><wsdl:operation name="Z_TEST_WS_CONFIG"><soap:operation soapAction=""/><wsdl:input><soap:body use="literal"/></wsdl:input><wsdl:output><soap:body use="literal"/></wsdl:output></wsdl:operation></wsdl:binding><wsdl:service name="Z_TEST_Q73_CONFIG_WSService"><wsdl:port name="Z_TEST_Q73_CONFIG_WSSoapBinding" binding="tns:Z_TEST_Q73_CONFIG_WSSoapBinding"><soap:address location="http://bsl8011.wdf.sap.corp:50073/sap/bc/srt/rfc/sap/Z_TEST_Q73_CONFIG_WS?sap-client=003"/></wsdl:port></wsdl:service></wsdl:definitions>
Can anyone help me, I have no Idea
Message was edited by: Hans-Peter Bauer

The message server defined in the SAP-Logon is us4278.wdf.sap.corp
But the url of the web service starts with http://us4185:58500/wsnavigator/jsps/explorer.jsp?description=WebServiceZ_TEST_Q73_CONFIG_WS
But I think that's not the problem, is it? As I mentioned above the test page can be shown, but the after filling in the input parameters an pressing send, there appears the authorisation error.
For better illustration I made some screenshots for you:
1) http://wipux2.wifo.uni-mannheim.de/~wi01211/sonstiges/WS_HOMEPAGE_OVERVIEW.gif
2) http://wipux2.wifo.uni-mannheim.de/~wi01211/sonstiges/WS_HOMEPAGE_TEST_INPUT_FORM.gif
3) http://wipux2.wifo.uni-mannheim.de/~wi01211/sonstiges/WS_HOMEPAGE_TEST_reqest_response.gif
What can be wrong, if the error "n0:FailedAuthentication" appears?
Regards,
Peter
Message was edited by: Hans-Peter Bauer

Authority CHeck VK11

Hi Guru's,
I want to have a authority check for table control field KOMG-KBSTAT in the screen 1850 for the program SAPMV13A.
I know how to create the authorisation object and also tested a sample code for a z-report .
I want the details how to apply it to a standard program. Please guide me for this issue.
Thanx in Advance,
Arcahan

Hello ,
I will elaborate my requirement.
See in the program SAPMV13A , screen no 1850 , the table control field is komg-kbstat .
The possible value's for komg-kbstat are as mentioned -
> 01-blocked , 02 - Released
Now I want the User ' XYZ' should have the authority to block only and not to release.
Regards,
W. Archana

How to create Authority check object

Hello Gurus,
How to create Authority-check object 'ZABC'
                                                         ID 'TABLE' FIELD 'ZTABLE'.
Please tell me detailed procedure.
Thanks in advance.
Best Regards,
zubera

Dear Zubera,
Creating Authorization Fields
In authorization objects, authorization fields represent the values to be tested during authorization checks.
To create authorization fields, choose Tools --> ABAP Workbench --> Development --> Other tools --> Authorization objects ® Fields.
To create a authorization field:
1. Choose Create authorization field.
2. On the next screen, enter the name of the field. Field names    must be unique and must begin with the letter Y or Z.
3. Assign a data element from the ABAP Dictionary to the field.
4. If desired, enter a check table for the possible entries. For    more information about check tables.
For more information about AUTHORITY-CHECK, see the keyword documentation of the ABAP Editor.
You can often use the fields defined by SAP in your own authorization objects. If you create a new authorization object, you do not need to define your own fields. For example, you can use the SAP field ACTVT in your own authorization objects to represent a wide variety of actions in the system.
Assigning an Authorization Object to an Object Class
Each authorization object must be assigned to an object class when it is created.
Choose Tools --> ABAP Workbench --> Development --> Other tools --> Authorization objects --> Objects.
You can also create authorization objects in the Object Navigator (SE80).
Creating / Choosing Object Classes
The system displays a list of existing object classes.
Object classes are organized according to the components of the system.
Before you can create a new object, you must define the object class for the component in which you are working. The objects are not overwritten when you install new releases.
You can also define your own object classes. If you do so, select class names that begin with Y or Z to avoid conflicts with SAP names.
Creating an Object
Enter a unique object name and the fields that belong to the object. Object names must begin with the letter Y or Z in accordance with the naming convention for customer-specific objects.
You can enter up to ten authorization fields in an object definition. You must also enter a description of the object and create documentation for it.
Ensure that the object definition matches the AUTHORITY-CHECK calls that refer to the object.
Do not change or delete authorization objects defined by SAP. This disables SAP programs that use the objects.
You can regenerate the profile SAP_ALL after creating an authorization object.
Best Regards,
Rajesh
Please reward points if found helpful.

Problem releasing workbench transports

We had created a number of changelists in our workbench and are trying to release these to transport them into out test system. When we release the transports which are created without issue in the development workbench we get the following message:
Preparation for export
Transport request   : CRDK903862
System              : CRD
tp path             : tp
Version and release: 372.04.57 700
Execution of the export pre-processing methods for request CRDK903862
Start: Execution of object-specific export pre-processing methods
Changelist C647D7C9CCE64307AFC4F46272840107 is not complete in this system
Request CRDK903862 is modifiable after error during release
Preparation for export
End date and time : 20090925164345
Ended with return code: ===> 8 <===
The Transport Agent Service is already activated.
Has anyone any idea what the problem could be
Thanks in advance

Hi,
You need to first check which TranportOrder ID was not getting released on the server .
Then fire the below query to find the changelists associated with that TransportOrder in the ARS database-
select * from changelist where state <>0 and transportorderid ='<Name of that Transport Order ID>'
Then follow these steps -
1. Stop the Transport Agent in Source repository.
2. Cleanup the blobs from WBTRCL, WBTRBLOB, WBTRBSEG tables
   in ars repository for the changelists, which were associated with
that specific transport order.
DELETE FROM WBTRCL WHERE CLID = <cHANGELIST ID> (GIVE WITHOUT 0X)
DELETE FROM WBTRBSEG WHERE CLID = <cHANGELIST ID> (GIVE WITHOUT 0X)
DELETE FROM WBTRBSEG WHERE CLID = <cHANGELIST ID> (GIVE WITHOUT 0X)
3. Use the transaction SMOBDELCL to remove details of this
   changelist from the CRM server. This transaction
   would require you to enter the id of the changelist.
   The id should be entered without 0x.
4. Create a new change request in the CRM server and add these
changelists to the change request.
5. Steps 1-5 of Note 568624 can be followed for this but NOT steps
   6 and 7.DO NOT release the change request. There is no need to modify
   the TransportOrderId field in changelist table in ARS repository to
   reflect the new change request id.The field is there for
   documentation purpose only.
6. Update the state of the changelist in ARS repository to 1 so that
   Transport Agent can pickup the changelist and send it to server as
   soon as it is started.
Eg:
UPDATE CHANGELIST SET STATE = 1 WHERE CHANGELISTID = <0XChangelistID>
(GIVE WITH 0X)
7. Start the Transport Agent on both Source repository.
Also, you need to make sure that whenever you release a changelist from Mobile Application Studio then
you should not chose this transport Order(which was not getting released earlier) while choosing the transport
Order.

Reg:Authority Check object

Dear All,
I am calling two authority check object M_MATE_MAR and M_MSEG_BMB in my report.
Now for a user if i see the Role the second object M_MSEG_BMB is maintained and the object M_MATE_MAR is not maintained.
Now in my program for the object M_MATE_MAR(as it is not maintained),my sy-subrc is returning 12,hence check faing and for
M_MSEG_BMB sy-subrc = 4 as check is failng.
My requirement is the user should not see some movement types irrespective of the material ,
If i pass a material in the selection screen report , movement type records are deleting fine along with that others are alos deleting becs of sy-subrc <> 0(sy-subrc = 12).so i get a blank report as output.
so wht should be done in my case.
Regards

Hi Rajendra,
When you hit F1 on the Authority-check,
If Sy-subrc = 4, Authorization check not successful. One or several authorizations were indeed found for the authorization object in the user master record and they include the value sets, but not the values specified, or incorrect or too many authorization fields were specified.
If Sy-subrc = 12, No authorization was found for the authorization object in the user master record.
When Sy-subrc = 24, Incorrect authorization fields or an incorrect number of authorization fields was found. This return value is no longer set since Release 6.20. Up to Release 4.6 it is set only if the profile parameter "auth/new_buffering" has a value less than 3.
When sy-subrc = 40, An invalid user ID has been entered in user.
Hope it helps.
Sujay

Release the transport request

Hi,
I created the transport request.I want to release the transport request from developement to testing ,
Please tell me how to do that.
regards,
chinna.

Hi,
Check the below steps.
1. Go To SE09 or SE10.
2. Click 'Display' button.
3. TR will be list out in Tree view.
4. Place the cursor in the TR which is going release.
5. in menu, Request/Task->Complete check->object and
Request/Task->Complete check->Check Request Consistancy
Request/Task->Complete check->Inactive Objects.
6. in above if you get any error, you should rectify the error and repeat all the steps again. otherwise do the step7.
7. Click the 'Release Direclty'[F9] button in the toolbar.
Regards,
Boobalan S

Solution Manager/Charm and Transport Dependency Check

Hello Everyone,
I apologize if this question has an obvious answer. I have searched SDN and could not get a 100% answer.
We are just now in the process of rolling out Charm/Solution Manager and I have noticed that it appears to not perform transport dependency checks. For example, let's say I am working on object ABC and have completed my testing (ready for transport to production) and then another developer also starts development on object ABC. When my change is moved to production, it will pick up the other developers modifications without giving a warning or an error that a dependency has been encountered between the two transport requests.
Does Charm/Solution Manager offer the option of producing a warning should a transport depedency be identified? If so, will someone explain (or point me to the appropriate documentation) how this can be set up?
Best Regards,
Scott

Hi Scott,
ChaRM supports imports from DEV->QAS->PRD by transport by transport requests level not by transport request task level. So don't worry(i.e., You can't import only your change of object ABC to production. It allows to import your change and other user's change of object ABC together to production).
This is how it works(if more than an user works on the same object):
1. Requester creates a support message from satelitte system to report a problem.
2. Service desk employee creates a change document because some changes need to be done on object ABC to correct that reported problem.
3. Change Manager approves the change document. So a normal correction is created automatically.
4. This normal correction is assigned to 2 developers(your scenario) like for an example DVPR1 and DVPR2.
5. DVPR1 creates a transport request and does some changes on object ABC. So a transport task will be created for DVPR1 under that transport request automatically.
6. When DVPR2 tries to do some changes on the same object ABC, a seperate transport task(not a transport request) will be created for DVPR2 under the same transport request because the object ABC is locked under the transport request. So DVPR2 can't create a separate transport request for the same object if any transport request is pending(not released).
7. Now object ABC will have one transport request. That transport request will have 2 transport tasks(1 for DVPR1 and 1 for DVPR2).
8. Each developer relases their transport task only(not transport request) once he/she completes his/her change on the object ABC.
9. DVPR1 or DVPR2 will change the status of normal correction to "Development Completed".
10. Now, IT operator or DVPR1 or DVPR2 can release the transport request. The transport request can be released only if all tasks are released under the same transport request.
(In this example: DVPR1 completed his change and released his transport task. Next DVPR2 completed and released his transport task).
11. Finally IT operator import the transport request to QAS and PRD.
Hope you are clear now. Let me know if you have any doubts.
Regards,
Sanjai

RRMX Authority check

hi,
There are two SAP BW systems , one with component SAP_BW SAPKW70017 (say B1) , and other one with SAP_BW component SAPKW70103 ( say B2)
In B2 , When a user executes RRMX , it takes them to the Business explorer(excel sheet) , however it throws a message in the GUI that "No authorization to change role <role>
Message no. S#423"
This message is received as soon as you get the excel sheet opened .
When further looked into the situation , seems like in B2 , the follwing select statement is executed ,( as soon as u execute RRMX)for checking the change access for all the users "assigned roles" ( I wonder why all roles?) with the object S_USER_AGr and throws the message when there is no 02 activity for any of the roles present with the user .
SELECT agr_name FROM agr_users INTO l_agr_name WHERE uname = sy-uname.
    CALL FUNCTION 'PRGN_AUTH_ACTIVITY_GROUP' -
> "this further throws the message"
      EXPORTING
        activity_group = l_agr_name
        action_change = 'X'
      EXCEPTIONS
        not_authorized = 12
        OTHERS         = 13.
    IF sy-subrc = 0.
      e_s_system_info-can_change_pfcg_roles = rs_c_true.
Whereas in B1 (old release) no such message is thrown for the same user . seems there is no such change activity check in the begining?( not too sure) and only when the user clicks the Role option in Query dialog , S_USER_AGR is checked as per the ST01 trace.
Is this a bug in SAP_BW 701 release ? If so , do you the SAP notes for correcting the same ?please reply at the earliest .Thanks in advance

Some customers have S_USER_GRP actvt '02' in production environments for the RRMX "key" users who publish queries to be able to add them to the menu for the users. A change in authorization data might not be required, typically.
But this "change" authority gives more access than just the menu, and the user will need other authorizations for S_USER_TCD and VAL as well.
It has been replaced by the BEXWeb, which you should take a look into.
As SAP "owns" the authority-checks in their programs, they seemed to have felt it appropriate to add the same check to RRMX for "key" users.
> Is this a bug in SAP_BW 701 release ?
I don't think it is a bug in BW 7.01. Arguably they could have added it earlier.
There is an approach to control this via the sideinfo.dat file using the program ID of the query - but I guess few did that or even knew about it. It is not intuitive.
Cheers,
Julius

User Exit for Cost Center authority check in reservation & service entry sh

Hi,
We want to have cost center authority check in reservation & SES. Whcih exit should we use for this purpose.
BTW, we tried the same in SES via the user exit SRVREL componet EXIT_SAPLEBND_003 for Change to Comm. Structure for Release Strategy Determination in the include ZXMLUU10 . Since then the Release strategy for SES is not effecting . Even after blocking the entire code by commenting it, the strategy is not effective. We are able to accept the SES using the Flag Button but without any strategy. How to revive the release strategy.
Thanks & regards,
KT Varkey

Hi Ramki,
Thanks for the advice. The problem is solved except that for Cost Centre authority check for SES. Tried SRVESLL but it doesn't work. Any other exit or any specific advice to make SRVESLL work for KOSTL check.
Best regards,
KT Varkey

Releasing a transport authority checks

Similar Messages

Maybe you are looking for